Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

The remote Windows host is missing security update 5053598. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035, CVE-2025-24045)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5053602. It is, therefore, affected by multiple vulnerabilities

  - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a     network. (CVE-2025-26645)

  - Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an     unauthorized attacker to execute code over a network. (CVE-2025-24035)

  - ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe     of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out     of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who     are still running this product understand that the product is End-of-Life and should be removed. For more     information on this, refer to the CVE Record's reference information. (CVE-2024-9157)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
232616	KB5053598: Windows 11 Version 24H2 / Windows Server 2025 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high
232613	KB5053602: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (March 2025)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2025-24994

high

Tenable Plugins

high

high